What
In auto mode, a separate safety check reviews Claude's actions and decides which ones are risky enough to block. That check follows a written set of rules, and parts of them are now filled in from configuration instead of being fixed text:
- the rule about attempts to get around the check now ends with a configurable tail
- the rule about tool results the check has not seen now ends with a configurable tail
- the rule about changes to persistent configuration is now replaced entirely by configured text
- a new slot lets extra rules be inserted
Before, the persistent configuration rule was fixed text saying that actions creating or changing lasting configuration or standing rules are high-severity however routine they look.
Why
The rules auto mode uses to block actions can now be tuned without a new release, so the exact wording can differ between setups.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
Where the configured text comes from, and whether the default wording still matches the old rules, is not known.